$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WaqEUURj-oeL9P6pBk1VL1-3Y4c.roa File: WaqEUURj-oeL9P6pBk1VL1-3Y4c.roa (raw, json) Hash identifier: Msd+QFXAqJ1F3+saYa0kftyKj+S9cYQJLF0QBcFhE1A= Subject key identifier: 59:AA:84:51:44:63:FA:87:8B:F4:FE:A9:06:4D:55:2F:5F:B7:63:87 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2425 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WaqEUURj-oeL9P6pBk1VL1-3Y4c.roa Signing time: Mon 10 Feb 2025 14:18:19 +0000 ROA not before: Mon 10 Feb 2025 14:18:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 61.56.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9253 (0x2425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:19 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=59AA84514463FA878BF4FEA9064D552F5FB76387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:45:e5:77:74:33:cf:ce:f0:cd:d5:e2:01: cd:9b:25:81:de:44:4c:f4:23:73:80:d2:1d:46:fa: 5c:09:55:20:ea:39:b7:c3:09:68:96:4f:b4:77:c9: 9e:37:63:3b:5b:21:3b:30:f7:82:b1:70:b2:25:5a: f1:4a:c9:c7:1e:2c:77:d1:00:25:43:48:32:cc:d8: 01:f1:93:a0:b2:44:76:fe:f4:9f:6c:1d:28:45:0d: 67:c8:23:68:12:b6:fe:b2:35:6b:33:b4:76:81:9b: 22:b4:76:f0:5b:e1:eb:23:f6:51:c2:dd:eb:95:c9: 7f:31:0e:b7:8f:27:5a:a4:a1:00:5d:d3:b0:15:20: 86:6e:69:d1:35:64:4f:d2:0a:ca:05:4b:b1:4d:50: 96:ef:80:05:a2:cc:63:18:d9:29:15:4f:06:1c:f1: 50:d7:c4:ca:99:12:00:ca:6e:5f:a1:a4:5d:71:69: a8:a0:80:54:cc:01:55:17:3b:4d:08:d8:6c:25:72: 17:ee:bc:78:96:81:e7:eb:6a:70:a9:a7:78:fb:7b: c7:67:72:1f:50:4e:af:9c:bf:03:bd:bd:44:19:90: f6:c9:52:ce:e3:95:ff:7a:d0:c5:30:7c:7c:ae:59: 4b:6b:72:fe:36:2b:19:22:bb:76:f9:88:9e:ec:81: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:84:51:44:63:FA:87:8B:F4:FE:A9:06:4D:55:2F:5F:B7:63:87 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WaqEUURj-oeL9P6pBk1VL1-3Y4c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.160.0/19 Signature Algorithm: sha256WithRSAEncryption 95:b3:86:d9:79:1b:79:5b:74:62:43:91:bb:c2:83:59:d0:ab: 16:75:12:cb:8e:30:cd:51:98:49:02:e7:8a:d0:43:2b:2c:6a: cc:57:a6:36:b9:00:aa:21:ed:58:8d:c4:62:79:91:ba:3c:38: a3:4c:d9:36:a0:5f:92:e8:6e:48:69:bf:a2:bc:5e:95:42:24: 31:f8:ff:1f:0d:01:f3:20:54:4c:cc:2d:d1:83:e7:ad:9b:0a: 5c:ba:7b:71:ab:5b:15:d2:9b:75:a3:c4:86:4b:35:8f:50:c0: 95:9b:98:f0:3c:a2:f7:84:c1:e8:3f:cf:ec:93:cb:fe:da:98: a7:2d:ec:93:4d:37:4c:37:50:dc:5c:af:34:6e:f0:49:50:fc: bb:0f:76:b8:a8:0e:e8:c3:35:15:f5:bf:6f:2e:b8:fa:8e:2f: d1:ba:61:ca:d9:dd:6d:25:6e:a1:7b:0f:05:44:81:cf:3f:de: 29:eb:b9:31:fc:3c:e6:18:38:c7:99:5e:05:64:6b:53:90:f1: 6f:30:1b:45:a3:6b:fa:bf:4e:0b:11:67:24:a3:74:aa:a3:92: 7b:f8:34:9b:05:90:6b:f2:a9:a5:3f:6c:e7:d0:59:e6:da:8f: 39:fd:cd:1f:e9:f8:e1:f7:23:d0:b0:74:3d:63:74:03:e8:0e: 88:61:44:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5QUE4NDUxNDQ2M0ZB ODc4QkY0RkVBOTA2NEQ1NTJGNUZCNzYzODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB60Xld3Qzz87wzdXiAc2bJYHeREz0I3OA0h1G+lwJVSDqObfD CWiWT7R3yZ43YztbITsw94KxcLIlWvFKycceLHfRACVDSDLM2AHxk6CyRHb+9J9s HShFDWfII2gStv6yNWsztHaBmyK0dvBb4esj9lHC3euVyX8xDrePJ1qkoQBd07AV IIZuadE1ZE/SCsoFS7FNUJbvgAWizGMY2SkVTwYc8VDXxMqZEgDKbl+hpF1xaaig gFTMAVUXO00I2GwlchfuvHiWgefranCpp3j7e8dnch9QTq+cvwO9vUQZkPbJUs7j lf960MUwfHyuWUtrcv42Kxkiu3b5iJ7sgQPRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUWaqEUURj+oeL9P6pBk1VL1+3Y4cwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1dhcUVVVVJqLW9lTDlQNnBC azFWTDEtM1k0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9 OKAwDQYJKoZIhvcNAQELBQADggEBAJWzhtl5G3lbdGJDkbvCg1nQqxZ1EsuOMM1R mEkC54rQQyssasxXpja5AKoh7ViNxGJ5kbo8OKNM2TagX5Lobkhpv6K8XpVCJDH4 /x8NAfMgVEzMLdGD562bCly6e3GrWxXSm3WjxIZLNY9QwJWbmPA8oveEweg/z+yT y/7amKct7JNNN0w3UNxcrzRu8ElQ/LsPdrioDujDNRX1v28uuPqOL9G6YcrZ3W0l bqF7DwVEgc8/3inruTH8POYYOMeZXgVka1OQ8W8wG0Wja/q/TgsRZySjdKqjknv4 NJsFkGvyqaU/bOfQWebajzn9zR/p+OH3I9CwdD1jdAPoDohhRBg= -----END CERTIFICATE-----Generated at Fri Apr 18 16:56:38 2025 by rpki-client